Overview

overview

10

Static

static

37fa8fa315...b8.exe

windows7_x64

10

37fa8fa315...b8.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37fa8fa315d60727ebce5fafa56690b8.exe

  • Size

    240KB

  • Sample

    220408-b3g19sbcgl

  • MD5

    37fa8fa315d60727ebce5fafa56690b8

  • SHA1

    599c28e16fda50ab1377e900678084ae28557090

  • SHA256

    e398c99bd0f61a4590594dc912e4d4ad23c306df6bd00274e2756d1a28f3ef80

  • SHA512

    cc900fb64eececdd030be5d6b79ef4213f128cae0f4314e77ced24df573d54a68350c2bcd3c5f448e4c640d336ef4888bc2b9a5a6fca1ba39668df4b43c50b09

Score
10/10
jigsawpersistenceransomware

Malware Config

Targets

    • Target

      37fa8fa315d60727ebce5fafa56690b8.exe

    • Size

      240KB

    • MD5

      37fa8fa315d60727ebce5fafa56690b8

    • SHA1

      599c28e16fda50ab1377e900678084ae28557090

    • SHA256

      e398c99bd0f61a4590594dc912e4d4ad23c306df6bd00274e2756d1a28f3ef80

    • SHA512

      cc900fb64eececdd030be5d6b79ef4213f128cae0f4314e77ced24df573d54a68350c2bcd3c5f448e4c640d336ef4888bc2b9a5a6fca1ba39668df4b43c50b09

    Score
    10/10
    jigsawpersistenceransomware

    • Jigsaw Ransomware

      Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.

      ransomwarejigsaw

    • Executes dropped EXE

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks